outlook
Fail
Audited by Snyk on Feb 27, 2026
Risk Level: HIGH
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 0.90). The skill stores client secrets and OAuth tokens in ~/.outlook-mcp and explicitly exposes a ./scripts/outlook-token.sh get command that prints the access token, meaning the agent would need to access and could output secret values verbatim.
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill explicitly reads and displays email bodies from users' mailboxes via the Microsoft Graph API (see "Reading Emails" commands like
./scripts/outlook-mail.sh read <id>and the example output showing "body" with converted HTML), meaning untrusted, user-generated third‑party content is ingested and can influence replies, sends, or other actions.
Audit Metadata